fix separator issue in 'use-csrf-in-your-own-forms'